> JapanHacked_
[Resolved][Severity: Major][Malware]

Itoham Yonekyu Holdings: a group PC was likely infected with Emotet, and suspicious mail went to people who had exchanged mail with the group

On September 15 the group found that a PC had very likely been infected after an attachment in an attack mail was opened, and mail posing as employees went to past contacts.

Disclosed

2020-09-18

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

On September 15 the group found that a PC had received a mail aimed at spreading Emotet and had very likely been infected when its attachment was opened. Mail posing as group employees was sent to people who had exchanged mail with the group. [1]

Emotet reuses names, addresses and parts of past mail to send messages that look like replies. The group said it had engaged an outside specialist to examine the damage and the route of infection. [1]

Timeline

  1. Started, Detected 2020-09-15
  2. Disclosed 2020-09-18
  3. 3 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社グループ従業員を騙った不審メールに関するお詫びとお知らせItoham Yonekyu Holdings · 2020-09-18